Renowned cybersecurity experts Sam Curry and Ian Carroll have uncovered a massive data exposure involving Olivia, the AI-powered chatbot McDonald’s uses to screen job applicants. The researchers found that a database tied to the bot contained over 64 million records, all exposed due to the use of the password
Chrome, Firefox, and Edge extensions—installed nearly a million times—are quietly turning users' browsers into commercial scraping tools, bypassing security measures and violating user trust. According to analysts at SecurityAnnex, a total of 245 malicious extensions have amassed approximately 909,000 downloads. While marketed for innocuous functions—such
Red Hat has issued a patch for a critical vulnerability in FreeIPA, a widely used domain controller for Linux systems. The flaw—CVE-2025-4404, rated CVSS 9.4—was discovered by Mikhail Sukhov, a researcher at Positive Technologies. FreeIPA is commonly deployed to manage user identities, authentication policies, and audit logging
While the infamous Log4Shell (CVE-2021-44228) and its related flaws dominated headlines in December 2021, two other critical vulnerabilities—Denial-of-Service (DoS) and data leakage—remained largely overlooked. Officially acknowledged only in September 2022, these issues were quietly absorbed into the original set of CVEs, leaving them unpatched and underreported as distinct
Critical flaws in OpenSynergy’s BlueSDK put Mercedes-Benz, Volkswagen, Skoda, and others at risk. Four newly disclosed vulnerabilities in the BlueSDK Bluetooth stack—developed by OpenSynergy—have exposed millions of vehicles to potential remote attacks. Collectively named PerfektBlue, these flaws enable remote code execution (RCE) and could grant attackers access
Security researchers have uncovered a new technique—dubbed TapTrap—that exploits Android’s user interface (UI) animations to bypass the platform’s permission system. The attack allows malicious apps to steal sensitive data or trick users into performing dangerous actions, including factory-resetting their devices. What Is TapTrap? TapTrap is a
Cybersecurity researcher Marco Figueroa has revealed a new technique for extracting Windows product keys from ChatGPT—this time by tricking the AI into playing a seemingly harmless guessing game. Figueroa is a leading expert in Mozilla’s 0Din (Zero-Day Investigative Network), a bug bounty program launched in mid-2024 to reward
Google has outlined how its Advanced Protection program now integrates with Chrome for Android, highlighting significant security upgrades aimed at protecting high-risk users from sophisticated threats. Earlier this year, with the release of Android 16, Google expanded Advanced Protection to the device level, offering system-wide safeguards for individuals who are
Hackers stole approximately $140 million from six Brazilian banks after bribing an insider at C&M, an IT firm that develops systems connecting financial institutions with Brazil’s Central Bank. The breach occurred on June 30, 2025, when attackers exploited the login credentials of João Nazareno Roque, a C&
Bitcoin Depot, the largest Bitcoin ATM operator in North America, has confirmed a data breach that exposed sensitive personal information belonging to approximately 27,000 individuals. The breach, which occurred in June 2024, remained undisclosed until now due to an active federal investigation. Delayed Disclosure Tied to Law Enforcement Request
As part of July's Patch Tuesday rollout, Microsoft addressed 137 security vulnerabilities across its product suite. While none of the flaws were known to be actively exploited in the wild, one zero-day vulnerability in Microsoft SQL Server (CVE-2025-49719) had been publicly disclosed prior to the patch, raising concerns
Security researchers have uncovered a new, more dangerous version of the Atomic Stealer (also known as AMOS) targeting macOS systems. This latest variant comes equipped with a built-in backdoor, giving attackers persistent, long-term access to compromised machines—even after reboot. Backdoor Discovery and Global Reach MacPaw’s threat intelligence team